Apktool v3.0.3

Apktool This is the repository for Apktool. The website is at theapktool.org repository. Apktool is a tool for reverse engineering third-party, closed, binary, Android apps. It can decode resources to nearly original form and rebuild them after making some modifications; it makes it possible to...

CVE-2026-47731

The AMMOS Instrument Toolkit Formerly the Bespoke Links to Instruments for Surface and Space BLISS is a Python-based software suite developed to handle Ground Data System GDS, Electronic Ground Support Equipment EGSE, commanding, telemetry uplink/downlink, and sequencing for instrument and CubeSa...

CVE-2026-47731

Summary (validated by connected docs): CVE-2026-47731 affects the NASA AMMOS AIT-Core software’s Binary Stream Capture (BSC) component. An unauthenticated HTTP API under /NAME/start allows a remote attacker to trigger path traversal by supplying attacker-controlled fields (log_dir_path, path, fil...

CVE-2026-47731 NASA AMMOS Instrument Toolkit: Path traversal resulting in arbitrary file append (can be triggered over the network by unauthenticated attacker)

The AMMOS Instrument Toolkit Formerly the Bespoke Links to Instruments for Surface and Space BLISS is a Python-based software suite developed to handle Ground Data System GDS, Electronic Ground Support Equipment EGSE, commanding, telemetry uplink/downlink, and sequencing for instrument and CubeSa...

CVE-2026-47731 NASA AMMOS Instrument Toolkit: Path traversal resulting in arbitrary file append (can be triggered over the network by unauthenticated attacker)

The AMMOS Instrument Toolkit Formerly the Bespoke Links to Instruments for Surface and Space BLISS is a Python-based software suite developed to handle Ground Data System GDS, Electronic Ground Support Equipment EGSE, commanding, telemetry uplink/downlink, and sequencing for instrument and CubeSa...

EUVD-2026-47011

The AMMOS Instrument Toolkit Formerly the Bespoke Links to Instruments for Surface and Space BLISS is a Python-based software suite developed to handle Ground Data System GDS, Electronic Ground Support Equipment EGSE, commanding, telemetry uplink/downlink, and sequencing for instrument and CubeSa...

MAL-2026-10986 Malicious code in comp-colors (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ac2a6fc7368c6b3ed1bfac9a3a9ea25e9a54ba5d980a48767c811e03fc72566 The package presents itself as a local color-palette toolkit but exports a public colors function in remote.py that POSTs to the hardcoded endpoint...

socket.io: engine.io: Socket.IO: Denial of Service via invalid binary POST requests

A flaw was found in Socket.IO, specifically within the Engine.IO protocol v4 polling transport. An unauthenticated attacker can exploit this vulnerability by sending invalid binary POST requests with a Content-Type of application/octet-stream. This improper handling of requests prevents the HTTP...

angr v9.3.0

angr angr is a platform-agnostic binary analysis framework. It is brought to you by the Computer Security Lab at UC Santa Barbara, SEFCOM at Arizona State University, their associated CTF team, Shellphish, the open source community, and @rhelmot. Project Links Homepage: https://angr.io Project...

Malicious code in turbom (PyPI)

Source: kam193 64978153f8a987180b6c8e88b5787598ed949a604527f0098271f97d8c66a235 Starting version 1.0.1, the package contains obfuscated code and embedded binary that is executed during the import, sharing many similarities with package oxntime. The embedded seems to act as a guard for further...

Malicious code in turbod (PyPI)

Source: kam193 78d60e25c1258021c4fb69a93456c76ef1157be852c7b9dc7165290ca599b0f7 Starting version 1.0.7, the package contains obfuscated code and embedded binary that is executed during the import, sharing many similarities with package oxntime. The embedded seems to act as a guard for further...

Malicious code in terraform-binary-wheel (PyPI)

--- Credit: OpenSSF source...

Malicious code in py-base58 (PyPI)

Source: amazon-inspector f4ef10f40dc13a645cebdee601417b590c92ab69039dbdf9962c36b36497949b py-base58 2.1.3 masquerades as a pure-Python base58 encoder but on first import of the top-level base58 package decodes a 640KB base64-embedded Linux ELF binary from base58/payload.py, writes it to...

Malicious code in oxntime (PyPI)

Source: kam193 4d96d9d5b1800042c94a33b8ac459abe42775a2c07e7cbd4ca2f689bdcf141ef The package contains obfuscated code and embedded binary that is executed during the import. The embedded binary targets Android and seems to act as a guard for further execution, with some sandbox evasion techniques...

Malicious code in httpprobe (PyPI)

Source: amazon-inspector cb46b890b54f51f3a98c1935dbd50e143430757c5daf4080039d32865b04c1d5 The package advertises itself as an 'HTTP probing tool for security researchers' but contains no HTTP-probing functionality. Its only behavior is to fetch and execute a Windows PE binary named 'miraiagent.ex...

Malicious code in hashidf (PyPI)

Source: kam193 126b111d14601f2ff653938378c5e6d0f534439f0eac8db7984dfe7aa0f20b52 If ran as a module, the package silently starts a binary hidden in a txt file in the background. At the moment, it appears to be PuTTy, and without additional instruction it does not do anything, but it is clearly a...

Malicious code in goodoldtoulas (PyPI)

Source: amazon-inspector 5414e9956c915ef34d422d9eba09177fb667bba375c43e9d9b54d4f87b628712 During pip install goodoldtoulas, setup.py invokes setuphelper which downloads main.exe from https://cold-eu-par-1.gofile.io/download/web/deb39e07-da2d-4081-a86b-6380e555788c/main.exe anonymous file host int...

Malicious code in fsociety-tools (PyPI)

Source: amazon-inspector 88731d75288f663967fc64dde12b04eb43a2eb3d4113486bf35b1cf3d89ae537 On import, fsocietytools/init.py loads tokens.py, which at module load time instantiates TokenManager. The constructor concatenates eight large string chunks, base64-decodes the result, XOR-decrypts the byte...

EUVD-2026-46261

A sandbox confinement bypass vulnerability exists in Canonical snapd within its internal execution environment compiler snap-confine. The default seccomp security templates generated by the engine to restrict system calls do not filter or reject process operations capable of creating or...

CVE-2026-47121

Sparkle vulnerability CVE-2026-47121 (affecting macOS AutoUpdate) arises from a defense-in-depth gap in delta application. An archive item can create a symlink in the destination tree and a subsequent file write may traverse the symlink path, allowing writes outside the intended destination when ...